Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
File:                     1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft (raw, json)
Hash identifier:          YMmAXyBxhEGNSBGOdPJlbD0DngQXutMU2nJOeqpMRmQ=
Subject key identifier:   5D:A1:88:0F:27:24:D6:9B:75:76:F9:F4:69:7F:04:0D:76:4A:B2:CD
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       5586FB3FE781B6B038990D3DA16DA396606B4624
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
Manifest number:          B2
Signing time:             Fri 24 Jul 2026 11:41:06 +0000
Manifest this update:     Fri 24 Jul 2026 11:36:06 +0000
Manifest next update:     Sat 25 Jul 2026 14:09:06 +0000
Files and hashes:         1: AS141679.roa (hash: +Dz+vmsU4Nyyvwcx+gRYUKBEeW5WRorKlfoJ/42yBPw=)
                          2: AS0.roa (hash: 132zAU1ahbknkNfBYBXQHL/eCue+m6AOBrdUkC7GbYY=)
                          3: AS4847.roa (hash: 3rkjW99xQWcKDBNK98Xl6QzkJQaB+U43s7sVMj+RwZA=)
                          4: AS9308.roa (hash: yftVhdAdhOlgvCg9H9SqFVvRoFbUFos16+3UvIPNuZo=)
                          5: AS18244.roa (hash: 5yJK4ELO+Ql7zMnruxm9AyXZ6E0mJAXs2fYYGtt7U6s=)
                          6: AS56020.roa (hash: 0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=)
                          7: AS4835.roa (hash: jAlH6Xn9Wx5euSm8I4X3tFNqFODKHPGDOqig5p/XK0k=)
                          8: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl (hash: op0F2mKMx4QCtip+WiIpVsjIMoE66YAk34XJs340SxQ=)
                          9: AS59020.roa (hash: /Pd1x3KaSGQFTXTyZbDS1WOjjkXg/3ewVYnbuFdYmwE=)
                          10: AS17622.roa (hash: PlKFHLxhO02lNPofzh4875427lXAWURw4U69Gq37PDM=)
                          11: AS4811.roa (hash: ddTKO1AsNR1SULkjlm2Hn5h6NSHZWKPAKCykA8E69zo=)
                          12: AS4808.roa (hash: u9OQxrqhpl1T/0ARzRa6lSxGFhl35YXPeECNJjqNd3M=)
                          13: AS17428.roa (hash: e/ULKElOqavWoA242IT/ZZxzH9PHsVAXBwW95iPT/jU=)
                          14: AS133111.roa (hash: wczUjdPp/Uwb5rWXi6oHegyjpDQrvqpc3CUSK3r89BE=)
                          15: AS136958.roa (hash: es7Px72aZsegKB/zlZjsZawH5pspdJD+M95b+DUVsMk=)
                          16: AS56040.roa (hash: HmwkCKoBQAU0uWAz5pjtRSJjSvqZi0caB0vR01UCqYc=)
                          17: AS56048.roa (hash: 5zXzSkrBQUFfid6aK1Hyf4IH0zjb8rUH3Vawr//Qfho=)
                          18: AS24400.roa (hash: 6koc0r+8oNvvJQ2n6u3kgNbZRGNkhF9vXGd/vCdqpYw=)
                          19: AS58466.roa (hash: 2DFqjnyNEv+uIPb/Uz6u1okUeW1cxPg4G+ffDatksUE=)
                          20: AS9808.roa (hash: 9DHAOxqPuZWJZQUPJlPeIiLta+TaGPyXD7TDGW80KoU=)
                          21: AS9802.roa (hash: 4/kRC4vWJ83omtig7t5aCQ+XqmsWSbaprpXcANd7oSg=)
                          22: AS133119.roa (hash: cMFfyh0zqTClFl0ii2ZoZ1a+PgYVLblIHc1vHK0hAZs=)
                          23: AS23724.roa (hash: T0fAwl6wYamPJGnxn4dx30kfD3ZCVW9sUQOvSfYJGI0=)
                          24: AS17621.roa (hash: wfLodr6aTTmW76SpdHD4FwYka5Izs6CtYx4KwIUOG8I=)
                          25: AS56046.roa (hash: mI1nt0SayxXQElAcu/cyI1exRhs6Pf9DcnVs45ciUq8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:86:fb:3f:e7:81:b6:b0:38:99:0d:3d:a1:6d:a3:96:60:6b:46:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Jul 24 11:36:06 2026 GMT
            Not After : Jul 25 14:09:06 2026 GMT
        Subject: CN=5DA1880F2724D69B7576F9F4697F040D764AB2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:ba:8a:e1:69:52:e2:2d:33:2f:bd:10:7e:
                    26:74:36:50:ea:5a:79:54:89:cc:a1:da:d8:e4:0d:
                    c3:b7:74:b2:50:d3:7e:c7:74:5a:51:1c:ef:3e:81:
                    78:43:b1:38:75:aa:29:eb:83:35:9f:2d:be:db:0e:
                    e3:b1:45:1d:9b:be:de:a5:8f:77:55:7d:8a:50:59:
                    6e:34:14:07:e7:7c:e2:5f:f3:83:25:5d:45:fe:f8:
                    c2:04:93:c4:e5:6e:9b:a0:b9:4c:1e:00:ca:b6:8c:
                    31:aa:09:75:99:c0:18:80:8f:84:e4:46:d0:7e:c5:
                    4f:b8:e1:b3:f2:37:46:83:d0:9d:03:de:e8:8b:b8:
                    44:fb:d2:79:49:7b:f2:e1:e2:35:51:f1:e4:5d:2e:
                    ba:37:f1:b4:0d:fa:f8:12:80:99:c4:c9:bd:e1:b9:
                    0c:cb:ea:50:32:65:68:df:68:ed:1c:5f:82:eb:9f:
                    14:dd:f7:62:db:42:b3:de:a7:25:44:cb:0f:a7:7a:
                    b6:f7:e0:5e:ad:26:35:8b:03:d0:bb:6f:13:e1:8e:
                    ca:70:61:67:bb:35:60:bd:b0:01:08:e0:48:27:e8:
                    54:9d:63:68:13:db:a4:65:a1:b6:c5:36:69:85:21:
                    b8:76:4c:40:af:31:a8:5a:4e:c4:c3:63:df:36:21:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:88:0F:27:24:D6:9B:75:76:F9:F4:69:7F:04:0D:76:4A:B2:CD
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:af:69:be:ee:c6:5c:f3:75:34:98:1b:f9:c6:b4:18:86:
         c0:1d:eb:ef:b7:14:64:72:41:3c:66:a6:3f:c7:31:60:e7:c3:
         b1:f8:9b:a2:67:8a:5a:3d:5c:e7:e9:69:88:35:9b:7f:0a:a1:
         53:ba:6d:4e:87:69:36:be:74:46:bd:1a:a2:c1:ad:3e:48:52:
         a8:a0:b3:86:b0:e5:f0:63:2d:68:da:67:f7:69:18:e5:21:51:
         99:d7:9e:c1:27:e1:60:00:f6:ff:5b:a9:1a:1e:06:cb:08:10:
         2a:7d:16:b9:44:29:de:e5:01:26:b1:cd:ff:d1:c1:ee:d9:27:
         4c:9e:c4:1d:26:5a:a6:a1:8e:e4:d4:8d:ed:61:4d:d1:d1:1d:
         5f:da:cc:b6:90:ac:21:3f:97:3e:17:eb:f5:9b:ed:b2:db:38:
         46:af:90:aa:4b:d5:93:e9:c4:82:19:b2:ab:1e:22:70:4a:7b:
         7a:2e:39:41:89:9d:22:8d:e6:1b:2b:a8:cc:af:7e:4c:9d:e8:
         92:50:d7:73:5c:6d:11:c3:91:21:60:be:66:06:1c:84:8b:b4:
         a2:0b:d1:0b:80:26:d9:06:c5:cd:32:a0:25:1b:2d:0a:f8:4f:
         b6:e1:fd:0e:e4:95:03:c4:0c:c1:a1:c2:75:02:cc:ae:bb:ff:
         e7:90:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:02 2026 by rpki-client